(19) 



J 



Europaisches Patentamt 
European Patent Office 
Office europeen des brevets 



(11) 



EP 1 324 565 A1 



(12) 



EUROPEAN PATENT APPLICATION 



(43) 


Date of publication: 


(51) int ci7: H04L 29/06, G06F 1/00 




02 07 2003 Bulletin 2003/27 






(21) 


Application number: 02258540.0 






(22) 


Date of filing: 11.12.2002 






(84) 


Designated Contracting States: 


(72) 


Inventors: 




AT BE BG CH CY CZ DE DK EE ES Fl FR GB GR 


• 


Ouye, Michael Michio 




IE IT LI LU MC NL PT SE SI SK TR 




Portola Valley, California 94028 (US) 




Designated Extension States: 


• 


Vainstein, Klimenty 




AL LT LV MK RO SI 




Morgan Hill, California 95037-9518 (US) 


(30) 


Priority: 12.12.2001 US 339634 P 


(74) 


Representative: Ablett, Graham Keith et al 




12.02.2002 US 76254 




Ablett & Stebbing, 




01.11.2002 US 286575 




Caparo House, 








101-103 Baker Street 


(71) 


Applicant: Pervasive Security Systems Inc. 




London W1U6FQ (GB) 




Menlo Park, California 94025 (US) 







(54) Method and architecture for providing access to secured data from non-secured clients 



(57) The present invention discloses various tech- 
niques for allowing non-secured clients to access se- 
cured data of an enterprise from a public network with- 
out compromising security integrity of the enterprise. 
According to one embodiment, a server, referred to as 
an interface server, is designated to interface with non- 
secured clients and coupled between a private network 



and a public network. The server can be one of local 
servers in a security system employed in an enterprise. 
In certain respects, the interface server is analogously 
placed in a "Demilitarized Zone", hence also referred to 
as a DMZ server. Through the DMZ server, some of the 
secured data in the enterprise can be accessed by the 
non-secured clients without compromising the security 
integrity of the enterprise. 
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